@cfxlabsinc/b2b-services
    Preparing search index...

    A namespace-scoped Temporal Cloud service account plus its two API keys — the Temporal analogue of AuroraWorkloadUser / ValkeyWorkloadUser. Drop one into a package's Pulumi program, keyed by the package name, and pass apiKeyToken into that package's function environment:

    const temporal = new TemporalServiceAccountUser("cfx-deposit-api", {
    namespaceId,
    nameSuffix: pulumi.getStack(),
    provider: temporalProvider,
    });
    // environment.variables:
    TEMPORAL_API_KEY: pulumi.secret(temporal.apiKeyToken),

    One service account per package means a single service can be revoked or rotated without touching the others sharing the namespace.

    The keys rotate on apply, with no step to run: see rotationSchedule. The previous key is never revoked, it expires a period later, so a runtime that has not yet picked up the new one keeps working.

    Hierarchy

    • ComponentResource
      • TemporalServiceAccountUser
    Index
    apiKeyId: Output<string>
    apiKeys: Record<RotationSlot, temporalcloud.Apikey>
    apiKeyToken: Output<string>

    The active key's token. Readable only at creation; the provider marks it a secret output, so it is KMS-encrypted in stack state rather than sitting in plaintext, and flows into SSM without ever being logged.

    serviceAccount: ServiceAccount
    serviceAccountId: Output<string>
    urn: Output<string>

    The stable logical URN used to distinctly address a resource, both before and after deployments.

    • Retrieves the data produces by initialize. The data is immediately available in a derived class's constructor after the super(...) call to ComponentResource.

      Returns Promise<any>

    • Returns the provider for the given module member, if one exists.

      Parameters

      • moduleMember: string

      Returns ProviderResource | undefined

    • Can be overridden by a subclass to asynchronously initialize data for this component automatically when constructed. The data will be available immediately for subclass constructors to use. To access the data use getData.

      Parameters

      • args: Inputs
      • Optionalopts: ComponentResourceOptions
      • Optionalname: string
      • Optionaltype: string

      Returns Promise<any>

    • Registers synthetic outputs that a component has initialized, usually by allocating other child sub-resources and propagating their resulting property values.

      Component resources can call this at the end of their constructor to indicate that they are done creating child resources. This is not strictly necessary as this will automatically be called after the initialize method completes.

      Parameters

      • Optionaloutputs: Inputs | Promise<Inputs> | Output<Inputs>

      Returns void

    • Returns true if the given object is a CustomResource. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.

      Parameters

      • obj: any

      Returns obj is ComponentResource<any>